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(^StartJ^) 



Allocate Buffer 



Reserve Space On The Disk Drive For The File 



Upon Exception, Write Processor Context Of The Crashing 
Process To The Buffer 



Write Thread Information For The Thread That Was Executing 
When The Exception Occurred To The Buffer 



Write The Process Information For The Process That Owns ' 
The Crashing Thread To The Buffer 



Write The Kernel Stack For The Crashing Thread To The Buffer ' 



WriteThe List Of Drivers To The Buffer 



Write Information About The Cause Of The Crash To The Buffer 



Write The Buffer To Disk As a Kernel Minidump File 



Upon Reboot, The Kernel Minidump File is transferred to a user- 
specified directory 



102 



104 



106 



108 



110 



112 



114 



116 



118 



120 



MS1-468US 



(^Start^^) 



Gather Information About The Callstack For All Running ' 

Threads 



Gather The Exception Information That Caused The Fault, IF 
ANY, And Thread Context Of The Fault 



Gather A Listing Of All Loaded Modules For The Faulting 

Application 



Gather The Processor Context For ALL Threads 



Write The Gathered Information From 
Steps 202 through 208, As Applicable, To Disk 
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Excel 


Outlook 


IE 


Number of threads 


10 


14 


12 


Largest Stack size in KB 


2 
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Total Stack Size in KB 
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Number of Modules 


56 


79 


82 


Size of Mini-dump File in KB 


38 
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MINI-DUMP_HEADER 
Signature 
Version 
DirectoryRva 
NumberOf Directories 



Directory [ 0 ] 

DirectoryType = MINIDUMP_MACHINEINFO 
DataRva 
DataSize 

Directory [ 1 ] 

DirectoryType = MINIDUMP_EXCEPTION 
DataRva 
DataSize 



Directory [ NumberOfDirectories - 1] 

DataType = MINIDUMP_THREAD_LIST 
DataRva 
DataSize 



Data [ 0 ] (MINIDUMP_MA CHINEINFO) 
MachineType 
MachineMode 

Data [ 1 ] (MINIDUMP_EXCEPTION) 
ExceptionCode 
ExceptionFlags 



Data [ NumberOfDirectories - 1](MINIDUMP_THREAD_LIST) 
NumberOf Threads 
Threads [ 0 ] 

Thread Id 

SuspendCount 

PriorityClass 
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Kernel Code 
User Code 
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Kernel Thread 




Kernel Memory 


User Thread 




User Memory 
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Kernel Context 
User Context 
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Kernel Stack 
User Stack 



